last executing test programs: 54.367159941s ago: executing program 0 (id=160): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000f00000001"], 0x48) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 53.515856118s ago: executing program 0 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 52.60561915s ago: executing program 0 (id=165): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80c1) r0 = syz_open_dev$I2C(&(0x7f0000000780), 0x5, 0xc0040) fsetxattr$system_posix_acl(r0, &(0x7f0000001f40)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) 51.487995414s ago: executing program 0 (id=171): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$eJzs3U9rE0EYx/HfbNImtbGmf0TwWC3oRbRexEtE8hYE8SDaNkIxVNQK6sVUPIno3btvwRfhRfEN6MmD+ALa08rM/kk22c2msUka/H5A3Wzm2Xkmm919JiAjAP+tm/Ufn67+sn+MVFBBentd8iSVpaKk0zpTfrazu73bbGz1O1DBRejAl1EQaXrabO403L97yd02zkWEqvZVUZXOfRgN3/dv/Oza99ubUDKYGHf1p/CkUnh1uvfLY8+sv70h41pHnMe0Mfva13MtTDoPAMCkBI99+/zfCwp/u6MS1u+eJ62Fj/1j+fwf1v6kExg5v++7Hc9/N8vyjT2/p9xb7fmem8LZ971oljhIzzNdr2cVFJKJAtPkzSpdLt7cg+1m49Lmo+aWp9eqhTqarcQ9hOw3NCfb1ZS5aR8DjN2kVpRBWt6MHcN6Rv7LQ/bYR8/0LXFCzBfzzdw1VX3UVlz/FX1js3UJV7vOVJD/5ez+5l2UbaXwtlGr1Tx3oMii6+Rs8kzljLKcPiNR9MEuKvkDQTUvTxe11BUVjO5KakApjlpOjVqPXmX0tZKIsqOJv83ZWY6aeW9um1X90WfVO+p/z+a35hp4WVdm+6oxa8GF5j7xYDyz6d0V3TGrPU+Olu5UknviT7GUlfpB/3saBhCdw3fa0DUtPH3x8mGh2Ww8sRv3UzYeV+I9M2+k1Db/vmGK0tDharX3lOQ7PY2je+AIks/cuHikB7T3j9zG9iobywBH9U1wG/LGeZoOv1H/Oqovkl86DgM8OcEbFMapfdKHCu8u9TF9bN1lgvmfq+TDet8VCvavW6XsOj0qyNJKNle9h0f0bY0dz4DKifglt3UiWUbnzA3mwzomZR7X0mBzrnMXpPOD91gN85wO/qucBqau77rH7/8AAAAAAAAAAAAAAAAAAADT5vD/Q2Du0FGTHiMAAAAAAAAAAAAAAAAAAAAAANMuXv9X0fq/Gmz93+6lWML1f8vKWf93ozeHnvV/P+zItCTW/wVG628AAAD//+RRfuQ=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000080)='./file1\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 50.149408456s ago: executing program 0 (id=176): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 49.52415587s ago: executing program 0 (id=180): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 46.778397126s ago: executing program 32 (id=180): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 14.348466321s ago: executing program 1 (id=270): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r1, &(0x7f0000000380)=@hci={0x1f, 0x4}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x6, @loopback, 0xa96}}, [0x9, 0x5, 0x80200000000000, 0xf5, 0x6, 0x9, 0xb4d, 0x4, 0xfffffffffffffffa, 0xfffffffffffff001, 0x1c, 0xaf, 0x1fffc00000000, 0x7, 0xe6a]}, &(0x7f0000000040)=0x100) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 10.718407351s ago: executing program 3 (id=279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 9.575271082s ago: executing program 3 (id=283): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 9.390045167s ago: executing program 1 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 8.361632845s ago: executing program 3 (id=288): syz_io_uring_setup(0x109c, &(0x7f00000000c0)={0x0, 0xc215, 0x800, 0x0, 0x3b5}, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x1000007, 0x401d071, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x20}], 0x1000000000000078) 8.344744357s ago: executing program 1 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./bus\x00', 0x18, &(0x7f0000000040)=ANY=[], 0xff, 0x5a91, &(0x7f0000006b40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) read$FUSE(r0, &(0x7f00000077c0)={0x2020}, 0x2020) 7.072387594s ago: executing program 3 (id=293): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$eJzs3UFr1E4Yx/HfJNvt/v8tNbYVQTxVBU+lrRcRRJF9B148idrdQnGpoBXUi9Vz8eCxd9+CL8KTeBa8efIFFDxEZpI0yW6S3XbZxq3fD3TJJvMk83SyyTwLSwTgn3Wv/ePTjZ/2z0i+fKkpyZPUkhqSLuhi6+XO7vZur9up2pHvIuyfURRpBtps7nSLQm2ci4gF9l1D85l1zeIgjKv1/dghPv/8s8eEYRgWrPek2exon5WR36u7AzUzhzrUbN29AADUzc3+o4m/L/nz8fzd86Rr8W3fbk/v/9N7A/0dRuruR63c/f+VFpLKKzR2fM+5TWm950o4u91LqsTKnXrFq5vxNj/XgWFVpeuL99/Wdq+7uvms1/H0XndimWbL7rWTP3i2t+8Gd71SUJtWGCn3I28zJ9acy2HG5rBR0v+l8Y/ozJRu6RsV88V8NQ9NoAN13PhbjdDYYXIjFfSNVNT/NeWL9AyXZRC1KsnyvIu+lC/kK7P01deNrGa8z0Y2+SDtZ0XUYl8WUXbrQ6KWCqM2hkQt90elZ3N55KSZD+aBWdEvfVb7aPztWeJHl/rhn0zbxrWMz4zKfBquZeDuJ/Gnbu9yYcuSqwcmYl9PdFMLL16/efq41+s+Z2G0heQ6+7f050QLyUlw6kf33cJHSXXkvr96e8um7dYonuJO9KAazNTXiOGNcY6e3HdO3vkarkk4demgHzOweCqI6eO5r/9d/ZepV9bcZM2+BBXz9KFFdGaP6yW1waJ7/b+8gssx7quHufIKbtSa68p16WrJEdsHA7sN4n5OtbtKvsIxbX3To8z8HwAAAAAAAAAAAAAAAAAAAFNhvJ83hGH684aWyhrXnSMAAAAAAAAAAAAAAAAAAAAAANNu8Pm/ulXr83/vK3qXf/4vgAn4EwAA////Xngs") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1b6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 6.364633811s ago: executing program 2 (id=294): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 6.246954255s ago: executing program 4 (id=295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x800}, 0x1c) 5.830952418s ago: executing program 5 (id=296): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x57b2}}}}]}, 0x4c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000040c0)='reno\x00', 0x5) sendto$inet(r0, &(0x7f0000000180)="4c24a682dfbc906ef862b7a1ab6f812a857fa4dbb940993e191020a53e", 0x1d, 0x4014, 0x0, 0x0) 5.682564235s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x34565348, 0x2, 0x6, 0x46, 0x2, 0x3, 0x700, 0x7, 0x0, 0x7}}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x23, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 5.200776694s ago: executing program 4 (id=298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fanotify_init(0x200, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.147975121s ago: executing program 2 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 4.711812707s ago: executing program 5 (id=300): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)) 4.230051945s ago: executing program 4 (id=301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) 4.160813655s ago: executing program 2 (id=302): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138c, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) 3.667318381s ago: executing program 5 (id=303): syz_io_uring_setup(0x109c, &(0x7f00000000c0)={0x0, 0xc215, 0x800, 0x0, 0x3b5}, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x1000007, 0x401d071, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x20}], 0x1000000000000078) 3.354922972s ago: executing program 1 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.20707356s ago: executing program 2 (id=305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) 3.139456779s ago: executing program 4 (id=306): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x44) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x4, 0x8, 0x5}}}}, 0xd) 2.62531111s ago: executing program 5 (id=307): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1b6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 2.237513077s ago: executing program 1 (id=308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x800}, 0x1c) 2.139469415s ago: executing program 4 (id=309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@errors_remount}, {@mblk_io_submit}, {@nolazytime}, {@test_dummy_encryption_v1}, {@minixdf}, {@mblk_io_submit}, {@resuid}], [{@smackfshat={'smackfshat', 0x3d, 'lem\x00\x00\x00\x00\x00\x00\x00\x00\x00^\x8ed\xa3\xd3p97\xfeJ\xb5\xbc\xba\x8bA\x16E\x85\xb5\x9b!\xcf\xb1n*[\xaf\xb2\x8ak\x81V\xcec\fD\x96\xee\xc6K\x04\x00\x00\x00\x00\x00\x00\x00\x8a\fb\xd5\x01\xbdS\xb8Ay;\v/\xf4\x8e+\x16\r\xe0c2kP\x06\x04\x1f\x9b\x11'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}]}, 0x3, 0x44a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.101798158s ago: executing program 2 (id=310): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x57b2}}}}]}, 0x4c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000040c0)='reno\x00', 0x5) sendto$inet(r0, &(0x7f0000000180)="4c24a682dfbc906ef862b7a1ab6f812a857fa4dbb940993e191020a53e", 0x1d, 0x4014, 0x0, 0x0) 1.296193883s ago: executing program 1 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r3, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) 1.2208027s ago: executing program 5 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 711.332115ms ago: executing program 4 (id=313): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0xfc, 0x0, &(0x7f0000000400)) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) 491.223541ms ago: executing program 3 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028b6296be141526b7e00000008", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 195.239031ms ago: executing program 2 (id=315): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}]}, 0x40}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=316): mkdirat(0xffffffffffffff9c, 0x0, 0x3e) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x1000000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x10400a, &(0x7f0000000080)={[], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}]}, 0x5, 0x52e, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ6JHDNiROFMWOo9gpTdhD9sgdiZU4wYkzByQOSD1xR+IANy7lgFRgBWqKkDDy2E6cP07c3cTejX8/aeQ388b+3tvRvGd93swLYGzdiIjdiLgSEe9GxEzneNLZ4s321jrv44f3Fvce3ltMotl85x9JVt86Fj3vaXmm85n5iPj+WxE/TI4E/WNEfXtnbaFSKW92DhUb1Y1ifXvn9mp1YaW8Ul4vlebn5mdfv/Na6dz6+lL11x9djYjf/faLH/5h9xs/bjVrulPX24/z1O761H6clsmI+M5FBBuBiU5/rjzKmx/pTZynNCI+ExEvZ/f/TExkV/Oww5fpm0NsHQBwEZrNmWjO9O4DAJddmuXAkrTQyQVMR5oWCu0c3gtxLa3U6o1by7Wt9aV2rux6TKXLq5XybCdXeD2mkuXVyfJcVu7uV8qlI/t3IuL5iPhp7mq2X1isVZZG+cUHAMbYM0fm/3/n2vM/AHDJ5Q+KuVG2AwAYnvyoGwAADJ35HwDGj/kfAMaP+R8Axo/5HwDGj/kfAMbKd99+u7U19zrPv156b3trrfbe7aVyfa1Q3VosLNY2NwortdpK9sye6lmfV6nVNuZeja33i41yvVGsb+/crda21ht3s+d63y1PDaVXAMBpnn/pgz8nEbH7xtVsi57n/Z85V7940a0DLlI66gYAIzNxSt1/htgOYPiOr/YFjAv5eBhf/2s2m9Gzdm9E3N8v9TwMtO9/EXqwX/rke3Hkkw6k1g2FJ8/Nzz9G/h94qsn/w/g6Lf/fn+/ycBnI/8P4ajYTa/4DwJiR4wdO/NW+R+/v/7PNnp0HF9QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeApMZ1uSFjprgU9HmhYKEc9GxPWYSpZXK+XZiHguIv6Um8q19uciwrpBAPA0S/+WdNb/ujnzyvTR2iu5T3LZa0T86Ofv/Oz9hUZjcy7iSvLP/eONB53jpVG0HwA4S3ee7s7jXR8/vLfY3YbZno++1V5ctBV3r7O1ayZjMnvNZ7mGa/9KOvttre8rE+cQf/d+RHzupP4nWW7kemfl06PxW7GfHWr89FD8NKtrv7b+LT57Dm2BcfNBa/x586T7L40b2evJ938+G6EeX3f82zs2/qX7499En/HvxqAxXv39t48dbM606+5HfGEyYq/74T3jTzd+0if+KwPG/8uLX3q5X13zFxE346T+J4diFRvVjWJ9e+f2anVhpbxSXi+V5ufmZ1+/81qpmOWoi91M9XF/f+PWc/3it/p/rU/8/Bn9/+qA/f/lf9/9wZdPif/1r5x8/V84JX5rTvzagPEXrv0m36+uFX+pT//Puv63Boz/4V93lgY8FQAYgvr2ztpCpVLefPxC/tRz0vMIMUAhidi94BAHhdyvfvLW2SfnhtaeRyxEv6qJJ6WFl6aQezKaMUBh1CMTcNEObvpRtwQAAAAAAAAAAAAAAOhnoL8HuvppTj5eGHEXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuMT+HwAA//99VtW2") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b381"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 223.261946][ T5792] cgroup: Unknown subsys name 'net' [ 223.382077][ T5792] cgroup: Unknown subsys name 'cpuset' [ 223.399016][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 234.900765][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.907625][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.432315][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 282.915921][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.932794][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.940719][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.949143][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.961364][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.975112][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.990340][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.991154][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.999335][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.014880][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.028547][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.033295][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.047418][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.055106][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.061552][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.252509][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.304350][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.338845][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.344515][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.356840][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.449613][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.458864][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.473039][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.502015][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.514218][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.345609][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 285.040108][ T5818] Bluetooth: hci0: command tx timeout [ 285.124568][ T5818] Bluetooth: hci2: command tx timeout [ 285.130495][ T5818] Bluetooth: hci1: command tx timeout [ 285.314193][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 285.382430][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 285.611071][ T49] Bluetooth: hci4: command tx timeout [ 285.613997][ T5818] Bluetooth: hci3: command tx timeout [ 285.696767][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 285.723859][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 285.748404][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.756735][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.765119][ T5819] bridge_slave_0: entered allmulticast mode [ 285.775636][ T5819] bridge_slave_0: entered promiscuous mode [ 285.904549][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.912487][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.920546][ T5819] bridge_slave_1: entered allmulticast mode [ 285.930625][ T5819] bridge_slave_1: entered promiscuous mode [ 286.233703][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.296414][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.557186][ T5819] team0: Port device team_slave_0 added [ 286.689421][ T5819] team0: Port device team_slave_1 added [ 286.822162][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.830136][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.837905][ T5816] bridge_slave_0: entered allmulticast mode [ 286.847836][ T5816] bridge_slave_0: entered promiscuous mode [ 286.942717][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.951648][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.959376][ T5816] bridge_slave_1: entered allmulticast mode [ 286.969446][ T5816] bridge_slave_1: entered promiscuous mode [ 287.120314][ T5818] Bluetooth: hci0: command tx timeout [ 287.200226][ T5818] Bluetooth: hci1: command tx timeout [ 287.206094][ T49] Bluetooth: hci2: command tx timeout [ 287.224597][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.232094][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.259177][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.345288][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.353242][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.361312][ T5814] bridge_slave_0: entered allmulticast mode [ 287.371781][ T5814] bridge_slave_0: entered promiscuous mode [ 287.387822][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.395342][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.422259][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.469429][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.477228][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.485141][ T5830] bridge_slave_0: entered allmulticast mode [ 287.493977][ T5830] bridge_slave_0: entered promiscuous mode [ 287.517333][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.539279][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.547265][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.555331][ T5814] bridge_slave_1: entered allmulticast mode [ 287.564186][ T5814] bridge_slave_1: entered promiscuous mode [ 287.677823][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.685522][ T5818] Bluetooth: hci3: command tx timeout [ 287.690462][ T5818] Bluetooth: hci4: command tx timeout [ 287.692919][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.706706][ T5830] bridge_slave_1: entered allmulticast mode [ 287.715912][ T5830] bridge_slave_1: entered promiscuous mode [ 287.735073][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.836696][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.846715][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.854472][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.862365][ T5827] bridge_slave_0: entered allmulticast mode [ 287.872873][ T5827] bridge_slave_0: entered promiscuous mode [ 287.969719][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.027202][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.035017][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.043173][ T5827] bridge_slave_1: entered allmulticast mode [ 288.053386][ T5827] bridge_slave_1: entered promiscuous mode [ 288.110281][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.238007][ T5816] team0: Port device team_slave_0 added [ 288.255707][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.273930][ T5816] team0: Port device team_slave_1 added [ 288.335393][ T5814] team0: Port device team_slave_0 added [ 288.466923][ T5819] hsr_slave_0: entered promiscuous mode [ 288.479755][ T5819] hsr_slave_1: entered promiscuous mode [ 288.498479][ T5814] team0: Port device team_slave_1 added [ 288.567732][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.736771][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.794930][ T5830] team0: Port device team_slave_0 added [ 288.813332][ T5830] team0: Port device team_slave_1 added [ 288.825746][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.834581][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.862223][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.032946][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.040503][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.068613][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.086080][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.093727][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.120467][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.161380][ T5827] team0: Port device team_slave_0 added [ 289.210215][ T5818] Bluetooth: hci0: command tx timeout [ 289.251346][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.258577][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.280305][ T5818] Bluetooth: hci2: command tx timeout [ 289.286853][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.290457][ T49] Bluetooth: hci1: command tx timeout [ 289.317727][ T5827] team0: Port device team_slave_1 added [ 289.345785][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.353328][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.380084][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.398348][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.406003][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.432712][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.567408][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.574958][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.601614][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.744428][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.751960][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.780545][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.790765][ T5818] Bluetooth: hci4: command tx timeout [ 289.796923][ T5818] Bluetooth: hci3: command tx timeout [ 290.048022][ T5830] hsr_slave_0: entered promiscuous mode [ 290.057544][ T5830] hsr_slave_1: entered promiscuous mode [ 290.066893][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.074834][ T5830] Cannot create hsr debugfs directory [ 290.098036][ T5816] hsr_slave_0: entered promiscuous mode [ 290.109308][ T5816] hsr_slave_1: entered promiscuous mode [ 290.118140][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.126336][ T5816] Cannot create hsr debugfs directory [ 290.170775][ T5814] hsr_slave_0: entered promiscuous mode [ 290.181417][ T5814] hsr_slave_1: entered promiscuous mode [ 290.190669][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.198456][ T5814] Cannot create hsr debugfs directory [ 290.649552][ T5827] hsr_slave_0: entered promiscuous mode [ 290.658992][ T5827] hsr_slave_1: entered promiscuous mode [ 290.667976][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.675843][ T5827] Cannot create hsr debugfs directory [ 291.280164][ T5818] Bluetooth: hci0: command tx timeout [ 291.366646][ T5818] Bluetooth: hci2: command tx timeout [ 291.372594][ T5818] Bluetooth: hci1: command tx timeout [ 291.677836][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.763256][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.847456][ T5818] Bluetooth: hci3: command tx timeout [ 291.847871][ T49] Bluetooth: hci4: command tx timeout [ 291.885367][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.926198][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.172075][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.225993][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.258097][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.325376][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.350973][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.377689][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.423542][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.533136][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.717018][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.753091][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.813645][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.873979][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.925191][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.004966][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.099676][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.166525][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.782123][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.054634][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.141731][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.179642][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.211194][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.230109][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.237763][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.346603][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.354428][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.483942][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.502470][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.596495][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.619319][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.627068][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.735411][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.743183][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.760069][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.767854][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.784474][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.792455][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.851182][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.858837][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.043117][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.051031][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.281860][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.596179][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.729506][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.872253][ T4164] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.880085][ T4164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.897098][ T4164] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.904879][ T4164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.186232][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.198675][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.369342][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.377106][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.510645][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.933482][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.006470][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.198086][ T5819] veth0_vlan: entered promiscuous mode [ 298.227032][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.321035][ T5819] veth1_vlan: entered promiscuous mode [ 298.352269][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.714871][ T5816] veth0_vlan: entered promiscuous mode [ 298.845442][ T5830] veth0_vlan: entered promiscuous mode [ 298.863217][ T5819] veth0_macvtap: entered promiscuous mode [ 298.914264][ T5816] veth1_vlan: entered promiscuous mode [ 298.991589][ T5819] veth1_macvtap: entered promiscuous mode [ 299.035718][ T5830] veth1_vlan: entered promiscuous mode [ 299.209696][ T5814] veth0_vlan: entered promiscuous mode [ 299.301216][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.359734][ T5814] veth1_vlan: entered promiscuous mode [ 299.433834][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.508590][ T5816] veth0_macvtap: entered promiscuous mode [ 299.578233][ T5830] veth0_macvtap: entered promiscuous mode [ 299.614304][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.624645][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.634512][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.643957][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.703699][ T5816] veth1_macvtap: entered promiscuous mode [ 299.748059][ T5830] veth1_macvtap: entered promiscuous mode [ 299.853552][ T5814] veth0_macvtap: entered promiscuous mode [ 299.927104][ T5814] veth1_macvtap: entered promiscuous mode [ 300.033345][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.093759][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.188543][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.214581][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.275833][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.348097][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.359492][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.371978][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.381635][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.408425][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.417728][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.427144][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.436491][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.499615][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.563160][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.572518][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.581896][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.591451][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.499044][ T5827] veth0_vlan: entered promiscuous mode [ 301.689031][ T5827] veth1_vlan: entered promiscuous mode [ 302.054634][ T5827] veth0_macvtap: entered promiscuous mode [ 302.138451][ T5827] veth1_macvtap: entered promiscuous mode [ 302.382345][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.518063][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.626403][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.638369][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.647714][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.657204][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.710629][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.718799][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.172908][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.181984][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.213044][ T3846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.221412][ T3846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.425737][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.434285][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.664250][ T3815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.673481][ T3815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.684800][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 308.753890][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.763178][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.860152][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.868282][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.082098][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.090564][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.147146][ T6002] syz_tun: entered allmulticast mode [ 310.213719][ T6002] dvmrp8: entered allmulticast mode [ 310.282103][ T6001] syz_tun: left allmulticast mode [ 310.383879][ T3782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.392282][ T3782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.746830][ T6007] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 310.982907][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.991279][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.344192][ T6020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.391655][ T6020] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 312.671552][ T6024] loop0: detected capacity change from 0 to 512 [ 312.802840][ T6024] ======================================================= [ 312.802840][ T6024] WARNING: The mand mount option has been deprecated and [ 312.802840][ T6024] and is ignored by this kernel. Remove the mand [ 312.802840][ T6024] option from the mount to silence this warning. [ 312.802840][ T6024] ======================================================= [ 313.027862][ T6024] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 313.038653][ T6024] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 313.132599][ T6024] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.11: Invalid inode table block 1 in block_group 0 [ 313.201687][ T6024] EXT4-fs (loop0): Remounting filesystem read-only [ 313.208609][ T6024] EXT4-fs (loop0): get root inode failed [ 313.214965][ T6024] EXT4-fs (loop0): mount failed [ 313.870067][ T6033] loop2: detected capacity change from 0 to 764 [ 314.161508][ T6035] loop1: detected capacity change from 0 to 8 [ 317.168497][ T6052] loop3: detected capacity change from 0 to 64 [ 318.310896][ T6057] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 318.337621][ T6057] CIFS mount error: No usable UNC path provided in device string! [ 318.337621][ T6057] [ 318.352118][ T6057] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 319.422196][ T6058] loop0: detected capacity change from 0 to 4096 [ 319.966601][ T6059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.350439][ T30] audit: type=1800 audit(1753051833.065:2): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 320.972398][ T6058] syz.0.22 (6058) used greatest stack depth: 4168 bytes left [ 328.317004][ T6100] loop1: detected capacity change from 0 to 16 [ 328.417509][ T6101] 9pnet_fd: Insufficient options for proto=fd [ 328.426586][ T6100] erofs (device loop1): mounted with root inode @ nid 36. [ 328.556371][ T6100] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 328.569304][ T6100] erofs (device loop1): bogus lookback distance 0 @ lcn 1 of nid 89 [ 328.578237][ T6100] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 328.594493][ T6100] erofs (device loop1): bogus lookback distance 0 @ lcn 1 of nid 89 [ 328.605519][ T6100] erofs (device loop1): read error -117 @ 0 of nid 89 [ 328.623619][ T30] audit: type=1800 audit(1753051841.355:3): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 329.279324][ T6104] netlink: 'syz.0.43': attribute type 15 has an invalid length. [ 332.663930][ T6130] 9pnet_fd: Insufficient options for proto=fd [ 332.934338][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 333.999069][ T6147] capability: warning: `syz.4.60' uses deprecated v2 capabilities in a way that may be insecure [ 334.066480][ T6149] loop4: detected capacity change from 0 to 8 [ 334.449221][ T6151] netlink: 51 bytes leftover after parsing attributes in process `syz.0.61'. [ 336.337622][ T6165] 9pnet_fd: Insufficient options for proto=fd [ 342.268801][ T6189] loop3: detected capacity change from 0 to 1024 [ 342.343153][ T6189] EXT4-fs: inline encryption not supported [ 342.349343][ T6189] EXT4-fs: Ignoring removed i_version option [ 342.541853][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.636334][ T6195] 9pnet_fd: Insufficient options for proto=fd [ 342.946158][ T6189] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 343.502417][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.704021][ T6213] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 345.828489][ T6215] Bluetooth: MGMT ver 1.23 [ 345.837159][ T6212] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 347.643427][ T6227] 9pnet_fd: Insufficient options for proto=fd [ 347.760598][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 347.767432][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 348.316586][ T6230] fuse: Unknown parameter '0x0000000000000004' [ 348.367893][ T6231] vxcan1: entered allmulticast mode [ 348.394568][ T6230] loop2: detected capacity change from 0 to 16 [ 348.444913][ T6230] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66300) [ 349.840827][ T49] Bluetooth: hci0: command 0x080f tx timeout [ 350.069117][ T6234] sctp: failed to load transform for md5: -2 [ 351.848519][ T6235] loop2: detected capacity change from 0 to 16384 [ 352.061483][ T6259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.094969][ T6258] 9pnet_fd: Insufficient options for proto=fd [ 352.941293][ T6263] fuse: Unknown parameter '0x0000000000000004' [ 352.993437][ T6265] loop2: detected capacity change from 0 to 64 [ 353.047815][ T6263] loop4: detected capacity change from 0 to 16 [ 353.170504][ T6263] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 66300) [ 354.315274][ T6270] loop2: detected capacity change from 0 to 512 [ 354.573156][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.586713][ T6270] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.188966][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.364150][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 357.382657][ T6299] fuse: Unknown parameter '0x0000000000000004' [ 357.441955][ T6300] loop4: detected capacity change from 0 to 16 [ 357.478793][ T6300] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 66300) [ 357.593666][ T6298] loop0: detected capacity change from 0 to 764 [ 357.803789][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.810768][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.266343][ T6311] loop4: detected capacity change from 0 to 16 [ 359.363768][ T6311] erofs: Unknown parameter 'ÿ18446744073709551615ÿ' [ 361.413743][ T6324] 9pnet_fd: Insufficient options for proto=fd [ 363.035818][ T6333] loop2: detected capacity change from 0 to 256 [ 363.317335][ T6333] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 363.330852][ T6336] syzkaller1: entered promiscuous mode [ 363.336843][ T6336] syzkaller1: entered allmulticast mode [ 364.318556][ T6345] loop4: detected capacity change from 0 to 64 [ 364.537442][ T6349] 9pnet_fd: Insufficient options for proto=fd [ 364.658988][ T6345] syz.4.140: attempt to access beyond end of device [ 364.658988][ T6345] loop4: rw=2049, sector=137, nr_sectors = 135 limit=64 [ 365.665573][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 366.616265][ T6367] loop0: detected capacity change from 0 to 256 [ 366.732826][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.865150][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.872624][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.883748][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.974934][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.982980][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 366.993337][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 367.037640][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 367.045481][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 367.052824][ T6367] FAT-fs (loop0): Directory bread(block 1285) failed [ 367.530984][ T6376] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 368.305125][ T6375] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 369.268896][ T6392] siw: device registration error -23 [ 369.407234][ T6392] loop2: detected capacity change from 0 to 512 [ 369.554435][ T6392] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 369.564711][ T6392] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 369.601297][ T49] Bluetooth: hci0: command 0x080f tx timeout [ 369.693351][ T6392] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.161: Invalid inode table block 1 in block_group 0 [ 369.784880][ T6392] EXT4-fs (loop2): Remounting filesystem read-only [ 369.792420][ T6392] EXT4-fs (loop2): get root inode failed [ 369.798485][ T6392] EXT4-fs (loop2): mount failed [ 370.786812][ T6404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 371.771742][ T6419] loop0: detected capacity change from 0 to 64 [ 372.561071][ T49] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 372.570648][ T49] Bluetooth: hci4: Injecting HCI hardware error event [ 372.578367][ T5818] Bluetooth: hci4: hardware error 0x00 [ 372.709076][ T5816] hfs: walked past end of dir [ 373.447630][ T3846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.680884][ T3846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.703583][ T6432] siw: device registration error -23 [ 373.830458][ T6432] loop4: detected capacity change from 0 to 512 [ 373.895947][ T6436] 9pnet_fd: Insufficient options for proto=fd [ 373.901539][ T6432] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 373.912340][ T6432] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 373.916636][ T3846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.027820][ T6432] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.177: Invalid inode table block 1 in block_group 0 [ 374.071353][ T6432] EXT4-fs (loop4): Remounting filesystem read-only [ 374.078274][ T6432] EXT4-fs (loop4): get root inode failed [ 374.084688][ T6432] EXT4-fs (loop4): mount failed [ 374.180603][ T3846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.640223][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 374.911210][ T3846] bridge_slave_1: left allmulticast mode [ 374.917190][ T3846] bridge_slave_1: left promiscuous mode [ 374.924468][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.051065][ T3846] bridge_slave_0: left allmulticast mode [ 375.057060][ T3846] bridge_slave_0: left promiscuous mode [ 375.064242][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.806795][ T3846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.840613][ T3846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.867319][ T3846] bond0 (unregistering): Released all slaves [ 376.611726][ T3846] hsr_slave_0: left promiscuous mode [ 376.650827][ T3846] hsr_slave_1: left promiscuous mode [ 376.660244][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.668046][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.774762][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.782864][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.970989][ T3846] veth1_macvtap: left promiscuous mode [ 376.977122][ T3846] veth0_macvtap: left promiscuous mode [ 376.983316][ T3846] veth1_vlan: left promiscuous mode [ 376.989003][ T3846] veth0_vlan: left promiscuous mode [ 378.077757][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.107051][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.117777][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.146725][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.165746][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.489380][ T3846] team0 (unregistering): Port device team_slave_1 removed [ 378.577890][ T3846] team0 (unregistering): Port device team_slave_0 removed [ 379.945971][ T6475] loop4: detected capacity change from 0 to 512 [ 380.063069][ T6475] vfat: Unknown parameter '01777777777777777777777' [ 380.321207][ T5818] Bluetooth: hci1: command tx timeout [ 380.493201][ T6475] loop4: detected capacity change from 0 to 1024 [ 381.076532][ T6464] chnl_net:caif_netlink_parms(): no params data found [ 381.330753][ T6487] loop1: detected capacity change from 0 to 128 [ 381.450895][ T6487] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 381.945169][ T6487] Zero length message leads to an empty skb [ 382.005040][ T6490] 9pnet_fd: Insufficient options for proto=fd [ 382.402145][ T5818] Bluetooth: hci1: command tx timeout [ 382.883090][ T6496] input: syz1 as /devices/virtual/input/input5 [ 383.722596][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.731644][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.739531][ T6464] bridge_slave_0: entered allmulticast mode [ 383.749648][ T6464] bridge_slave_0: entered promiscuous mode [ 383.945363][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.953575][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.989619][ T6464] bridge_slave_1: entered allmulticast mode [ 384.000135][ T6464] bridge_slave_1: entered promiscuous mode [ 384.485799][ T5818] Bluetooth: hci1: command tx timeout [ 384.754512][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.945247][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.324294][ T6520] loop3: detected capacity change from 0 to 16 [ 385.436668][ T6520] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 66300) [ 385.509412][ T6464] team0: Port device team_slave_0 added [ 385.642715][ T6464] team0: Port device team_slave_1 added [ 385.897438][ T6525] loop4: detected capacity change from 0 to 512 [ 385.913870][ T6527] loop1: detected capacity change from 0 to 64 [ 385.959087][ T6525] vfat: Unknown parameter '01777777777777777777777' [ 386.125875][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.135949][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.165390][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.241915][ T6525] loop4: detected capacity change from 0 to 1024 [ 386.387878][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.395473][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.426315][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.560914][ T5818] Bluetooth: hci1: command tx timeout [ 386.874433][ T6535] 9pnet_fd: Insufficient options for proto=fd [ 387.332251][ T6464] hsr_slave_0: entered promiscuous mode [ 387.343282][ T6464] hsr_slave_1: entered promiscuous mode [ 387.352654][ T6464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.364253][ T6464] Cannot create hsr debugfs directory [ 387.962436][ T6545] input: syz1 as /devices/virtual/input/input6 [ 390.004918][ T6464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.093120][ T6464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.200221][ T6464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.221765][ T6561] loop3: detected capacity change from 0 to 512 [ 390.297603][ T6464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.309319][ T6561] vfat: Unknown parameter '01777777777777777777777' [ 390.696620][ T6561] loop3: detected capacity change from 0 to 1024 [ 391.944097][ T6576] 9pnet_fd: Insufficient options for proto=fd [ 392.026685][ T6464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.324430][ T6464] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.441924][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.449626][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.601400][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.609095][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.126081][ T6584] input: syz1 as /devices/virtual/input/input7 [ 394.872995][ T6605] loop1: detected capacity change from 0 to 512 [ 394.913034][ T6605] vfat: Unknown parameter '01777777777777777777777' [ 395.671523][ T6464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.854380][ T6612] 9pnet_fd: Insufficient options for proto=fd [ 398.810607][ T6464] veth0_vlan: entered promiscuous mode [ 398.901819][ T6464] veth1_vlan: entered promiscuous mode [ 399.402222][ T6464] veth0_macvtap: entered promiscuous mode [ 399.558331][ T6464] veth1_macvtap: entered promiscuous mode [ 399.940146][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.016369][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.077511][ T6648] loop1: detected capacity change from 0 to 512 [ 400.098666][ T6464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.108057][ T6464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.119301][ T6464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.128516][ T6464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.196440][ T6648] vfat: Unknown parameter '01777777777777777777777' [ 400.222745][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 400.235481][ T6653] loop3: detected capacity change from 0 to 64 [ 403.753414][ T6689] 9pnet_fd: Insufficient options for proto=fd [ 404.079586][ T6693] loop4: detected capacity change from 0 to 512 [ 404.184136][ T6693] vfat: Unknown parameter '01777777777777777777777' [ 405.294733][ T6709] loop4: detected capacity change from 0 to 256 [ 405.357180][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.470961][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.478180][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.487878][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.603462][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.611963][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.621107][ T6709] FAT-fs (loop4): Directory bread(block 1285) failed [ 405.681688][ T6709] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 405.921117][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 405.927705][ T5110] Bluetooth: hci3: command 0x0406 tx timeout [ 405.933037][ T5824] Bluetooth: hci0: command 0x080f tx timeout [ 407.702196][ T6735] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 409.602251][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 409.609052][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 409.939734][ T6759] loop4: detected capacity change from 0 to 256 [ 410.021257][ T6759] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.151173][ T6759] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.158423][ T6759] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.166505][ T6759] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.265334][ T6762] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.272773][ T6762] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.280196][ T6762] FAT-fs (loop4): Directory bread(block 1285) failed [ 410.313799][ T6759] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 410.394810][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.408967][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.863741][ T4129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.872161][ T4129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.235760][ T6768] loop3: detected capacity change from 0 to 128 [ 411.331261][ T6768] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 411.690790][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 412.212734][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.181'. [ 412.651205][ T6779] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 413.763027][ T6794] netlink: 452 bytes leftover after parsing attributes in process `syz.4.282'. [ 413.772868][ T6794] netlink: 452 bytes leftover after parsing attributes in process `syz.4.282'. [ 414.184764][ T6800] loop2: detected capacity change from 0 to 256 [ 414.262985][ T6800] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.414079][ T6800] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.421692][ T6800] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.428782][ T6800] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.457573][ T6804] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.465303][ T6804] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.472740][ T6804] FAT-fs (loop2): Directory bread(block 1285) failed [ 414.561203][ T49] Bluetooth: hci0: command 0x080f tx timeout [ 414.573922][ T5818] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 414.629435][ T6805] loop5: detected capacity change from 0 to 256 [ 414.704188][ T6806] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 414.842292][ T6805] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0x00010000 [ 414.892806][ T6805] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119cafc) [ 414.903714][ T6805] exFAT-fs (loop5): invalid boot region [ 414.917745][ T6805] exFAT-fs (loop5): failed to recognize exfat type [ 415.808024][ T6816] loop4: detected capacity change from 0 to 64 [ 415.960300][ T6816] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 416.322296][ T6822] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 416.470484][ T6823] loop3: detected capacity change from 0 to 64 [ 416.502778][ T6820] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 416.640602][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 416.664977][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.724222][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 419.279363][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.286438][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.800702][ T5818] Bluetooth: hci0: command 0x080f tx timeout [ 420.835723][ T6863] loop5: detected capacity change from 0 to 64 [ 421.402320][ T6868] loop4: detected capacity change from 0 to 512 [ 421.498489][ T6868] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.506433][ T6868] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.513750][ T6868] ext4: Unknown parameter 'smackfshat' [ 422.888352][ T6879] loop4: detected capacity change from 0 to 1024 [ 423.294410][ T6879] ===================================================== [ 423.302315][ T6879] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 423.312248][ T6879] hfsplus_delete_cat+0x1195/0x13d0 [ 423.317761][ T6879] hfsplus_rmdir+0x13c/0x310 [ 423.322905][ T6879] vfs_rmdir+0x5b6/0x800 [ 423.327370][ T6879] do_rmdir+0x87b/0xf30 [ 423.331910][ T6879] __ia32_sys_unlinkat+0x166/0x210 [ 423.337278][ T6879] ia32_sys_call+0x3d22/0x42c0 [ 423.342402][ T6879] __do_fast_syscall_32+0xb0/0x150 [ 423.348419][ T6879] do_fast_syscall_32+0x38/0x80 [ 423.353917][ T6879] do_SYSENTER_32+0x1f/0x30 [ 423.358675][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.365489][ T6879] [ 423.366762][ T6882] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 423.367897][ T6879] Uninit was stored to memory at: [ 423.368167][ T6879] hfsplus_create_cat+0x18fb/0x1910 [ 423.386041][ T6879] hfsplus_mknod+0x208/0x560 [ 423.392540][ T6879] hfsplus_mkdir+0x5a/0x80 [ 423.397192][ T6879] vfs_mkdir+0x4ea/0x850 [ 423.401953][ T6879] do_mkdirat+0x41a/0xf30 [ 423.407502][ T6879] __ia32_sys_mkdirat+0xc1/0x140 [ 423.413227][ T6879] ia32_sys_call+0x3142/0x42c0 [ 423.418256][ T6879] __do_fast_syscall_32+0xb0/0x150 [ 423.423822][ T6879] do_fast_syscall_32+0x38/0x80 [ 423.428946][ T6879] do_SYSENTER_32+0x1f/0x30 [ 423.433885][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.441872][ T6879] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.444412][ T6879] Uninit was stored to memory at: [ 423.449971][ T6879] hfsplus_create_cat+0x18fb/0x1910 [ 423.455475][ T6879] hfsplus_fill_super+0x212e/0x2740 [ 423.461106][ T6879] get_tree_bdev_flags+0x6e3/0x920 [ 423.466481][ T6879] get_tree_bdev+0x38/0x50 [ 423.471434][ T6879] hfsplus_get_tree+0x35/0x40 [ 423.476396][ T6879] vfs_get_tree+0xb0/0x5c0 [ 423.481238][ T6879] do_new_mount+0x738/0x1610 [ 423.486078][ T6879] path_mount+0x6db/0x1e90 [ 423.490870][ T6879] __se_sys_mount+0x6eb/0x7d0 [ 423.496947][ T6879] __ia32_sys_mount+0xe2/0x150 [ 423.502240][ T6879] ia32_sys_call+0x2733/0x42c0 [ 423.508694][ T6879] __do_fast_syscall_32+0xb0/0x150 [ 423.514610][ T6879] do_fast_syscall_32+0x38/0x80 [ 423.519722][ T6879] do_SYSENTER_32+0x1f/0x30 [ 423.524675][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.532211][ T6879] [ 423.534674][ T6879] Uninit was created at: [ 423.539587][ T6879] __alloc_frozen_pages_noprof+0x689/0xf00 [ 423.545897][ T6879] alloc_pages_mpol+0x328/0x860 [ 423.551326][ T6879] alloc_frozen_pages_noprof+0xf7/0x200 [ 423.557145][ T6879] allocate_slab+0x24d/0x1220 [ 423.562393][ T6879] ___slab_alloc+0xfec/0x3480 [ 423.567354][ T6879] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 423.573572][ T6879] hfsplus_alloc_inode+0x5a/0xd0 [ 423.578824][ T6879] alloc_inode+0x8a/0x4a0 [ 423.583622][ T6879] iget_locked+0x239/0x12d0 [ 423.588403][ T6879] hfsplus_iget+0x5c/0xb80 [ 423.593341][ T6879] hfsplus_btree_open+0x134/0x1d00 [ 423.598707][ T6879] hfsplus_fill_super+0x1161/0x2740 [ 423.605067][ T6879] get_tree_bdev_flags+0x6e3/0x920 [ 423.611671][ T6879] get_tree_bdev+0x38/0x50 [ 423.616343][ T6879] hfsplus_get_tree+0x35/0x40 [ 423.621900][ T6879] vfs_get_tree+0xb0/0x5c0 [ 423.626565][ T6879] do_new_mount+0x738/0x1610 [ 423.631541][ T6879] path_mount+0x6db/0x1e90 [ 423.636205][ T6879] __se_sys_mount+0x6eb/0x7d0 [ 423.641257][ T6879] __ia32_sys_mount+0xe2/0x150 [ 423.646271][ T6879] ia32_sys_call+0x2733/0x42c0 [ 423.651408][ T6879] __do_fast_syscall_32+0xb0/0x150 [ 423.656776][ T6879] do_fast_syscall_32+0x38/0x80 [ 423.662043][ T6879] do_SYSENTER_32+0x1f/0x30 [ 423.666799][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.673577][ T6879] [ 423.676112][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.4.313 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(none) [ 423.689605][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.700151][ T6879] ===================================================== [ 423.707281][ T6879] Disabling lock debugging due to kernel taint [ 423.715039][ T6879] Kernel panic - not syncing: kmsan.panic set ... [ 423.721702][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.4.313 Tainted: G B 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(none) [ 423.735486][ T6879] Tainted: [B]=BAD_PAGE [ 423.739815][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.750121][ T6879] Call Trace: [ 423.753584][ T6879] [ 423.756711][ T6879] __dump_stack+0x26/0x30 [ 423.761344][ T6879] dump_stack_lvl+0x53/0x270 [ 423.766223][ T6879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.772318][ T6879] dump_stack+0x1e/0x25 [ 423.776755][ T6879] panic+0x4bd/0xd50 [ 423.781001][ T6879] kmsan_report+0x31c/0x320 [ 423.785775][ T6879] ? __msan_memcpy+0x108/0x1c0 [ 423.790871][ T6879] ? __msan_warning+0x1b/0x30 [ 423.795804][ T6879] ? hfsplus_delete_cat+0x1195/0x13d0 [ 423.801499][ T6879] ? hfsplus_rmdir+0x13c/0x310 [ 423.806502][ T6879] ? vfs_rmdir+0x5b6/0x800 [ 423.811158][ T6879] ? do_rmdir+0x87b/0xf30 [ 423.815725][ T6879] ? __ia32_sys_unlinkat+0x166/0x210 [ 423.821277][ T6879] ? ia32_sys_call+0x3d22/0x42c0 [ 423.826451][ T6879] ? __do_fast_syscall_32+0xb0/0x150 [ 423.832004][ T6879] ? do_fast_syscall_32+0x38/0x80 [ 423.837290][ T6879] ? do_SYSENTER_32+0x1f/0x30 [ 423.842219][ T6879] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.849021][ T6879] ? kmsan_get_metadata+0xfb/0x160 [ 423.854406][ T6879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.860498][ T6879] ? hfsplus_bnode_dump+0x50a/0x560 [ 423.865976][ T6879] ? kmsan_get_metadata+0xfb/0x160 [ 423.871354][ T6879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.877449][ T6879] ? hfsplus_brec_remove+0x92f/0xa60 [ 423.883039][ T6879] ? kmsan_get_metadata+0xfb/0x160 [ 423.888421][ T6879] __msan_warning+0x1b/0x30 [ 423.893157][ T6879] hfsplus_delete_cat+0x1195/0x13d0 [ 423.898678][ T6879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 423.904777][ T6879] ? kmsan_get_metadata+0xfb/0x160 [ 423.910221][ T6879] hfsplus_rmdir+0x13c/0x310 [ 423.915072][ T6879] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 423.920424][ T6879] vfs_rmdir+0x5b6/0x800 [ 423.924926][ T6879] do_rmdir+0x87b/0xf30 [ 423.929349][ T6879] __ia32_sys_unlinkat+0x166/0x210 [ 423.934745][ T6879] ia32_sys_call+0x3d22/0x42c0 [ 423.939787][ T6879] __do_fast_syscall_32+0xb0/0x150 [ 423.945185][ T6879] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 423.951184][ T6879] do_fast_syscall_32+0x38/0x80 [ 423.956296][ T6879] do_SYSENTER_32+0x1f/0x30 [ 423.961067][ T6879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.967707][ T6879] RIP: 0023:0xf70fe539 [ 423.971989][ T6879] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 423.991884][ T6879] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 424.000538][ T6879] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 424.008692][ T6879] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.016842][ T6879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.024996][ T6879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 424.033168][ T6879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.041354][ T6879] [ 424.044873][ T6879] Kernel Offset: disabled [ 424.049350][ T6879] Rebooting in 86400 seconds..